Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          kRIsjIAQoMPTrFbp1vdNjbgthDpeREi307fWxAezndY=
Subject key identifier:   6D:7F:0E:96:3D:29:D6:DC:91:44:1F:45:D3:FD:21:2E:02:81:6D:F3
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       01904868EFD1E5CF3C69B6E7638F70208201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          0C5E
Signing time:             Mon 24 Jun 2024 04:02:34 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:34 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:34 +0000
Files and hashes:         1: 0XF3tCJVN6oAEomOcqY-2X-HiJE.roa (hash: sj1x3FNTFQ5UoIMTnKC08EFjO7riCTsD1cC1n3PniXs=)
                          2: 8b4jLkWmezkWi-4IvRT_YolRPDg.roa (hash: 7OY0AF/0NIygP4BfCC4VYaLaZKRn/42GiIaWzUMTqsU=)
                          3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: eoXdsAPCBHCT82jxrB22hWVT4Rw2LIHa4qabi4RJIuY=)
                          4: vO1SDABKywSMpihkHNx6b3YVHOQ.roa (hash: mP3QII/lDB6wNLEyPpMegrE3WbbWlLXQpHzbkr3vZ3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:ef:d1:e5:cf:3c:69:b6:e7:63:8f:70:20:82:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Jun 24 04:02:34 2024 GMT
            Not After : Jun 25 04:02:34 2024 GMT
        Subject: CN=6d7f0e963d29d6dc91441f45d3fd212e02816df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:5c:f5:25:ea:c9:ad:a1:11:37:b1:1f:1d:
                    77:ab:16:e5:f3:5d:d2:14:6b:9f:73:c9:65:4c:5f:
                    94:6e:b2:3d:00:55:6d:67:70:f5:5d:b6:28:15:b7:
                    f2:9f:f4:fc:18:34:f3:6e:d4:4e:e5:b0:ad:6d:2a:
                    68:83:4c:6b:42:8f:8d:d4:b8:0f:b6:a5:fa:dc:8b:
                    ea:af:41:08:d8:69:0d:97:46:ed:e7:c6:7e:55:7f:
                    05:46:7f:d3:99:0b:f2:a8:b4:af:d8:33:c3:a4:86:
                    89:56:72:3a:93:32:98:43:48:0a:23:6e:5c:5c:c8:
                    aa:cd:24:ba:ce:e7:a5:90:b5:18:8d:7d:6e:01:61:
                    c2:b3:e2:b1:00:08:fe:bf:f1:77:a3:a9:51:a2:3f:
                    66:0f:89:ee:bc:24:73:6a:7f:95:75:42:4f:77:11:
                    02:88:90:d8:f5:c1:a2:5d:5f:92:13:c5:e6:a5:94:
                    2e:8c:19:51:ce:db:b2:9e:4a:f6:a6:ef:57:ef:3a:
                    bd:3f:ea:44:3c:27:9f:65:2a:3e:46:b9:9d:ac:18:
                    1b:22:63:1d:f6:c2:b0:ef:6c:04:bf:41:6c:b9:13:
                    c5:5e:83:0b:0b:73:c3:03:a4:42:8c:8e:29:6a:0e:
                    89:0e:15:7f:8a:1d:4a:66:bf:83:fa:94:ed:9e:21:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7F:0E:96:3D:29:D6:DC:91:44:1F:45:D3:FD:21:2E:02:81:6D:F3
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:8b:9c:dc:a8:e8:0b:36:9a:fa:2c:a3:9a:bf:80:c8:76:
         36:d0:da:1b:dc:8a:8d:0c:e6:9f:2a:9e:71:a9:e1:e3:13:21:
         91:3f:7b:3b:37:62:cd:89:a2:d4:d6:55:c9:c3:fc:71:e4:ee:
         4b:d1:72:59:26:3d:07:d7:30:2f:ca:c2:64:63:c6:93:38:73:
         48:f0:83:cb:32:68:d0:ac:e8:f8:4e:a4:24:d0:04:da:31:80:
         fa:37:42:62:dc:6c:f1:84:e5:39:ca:86:87:87:f8:45:3d:4e:
         b4:53:66:2d:36:32:46:a6:58:e1:06:05:46:60:fb:19:45:92:
         d5:cf:a7:76:5c:67:ba:32:7a:3b:23:7f:7b:07:83:b2:90:3e:
         81:9a:0c:80:9e:37:48:e1:c1:cb:6a:51:81:69:ab:78:0e:44:
         fc:3d:b3:b9:ea:38:c6:0b:aa:ce:e5:9d:44:fe:21:97:47:cb:
         7e:1a:52:b9:52:cd:cc:4a:11:2e:bb:ab:3d:a4:9d:43:f7:95:
         43:02:59:e3:9e:45:80:e7:db:87:58:ec:59:55:bd:07:29:1c:
         e7:47:e8:50:ef:a1:aa:ad:c6:72:1f:2f:08:ba:32:b8:c2:4d:
         cf:59:02:29:ff:f0:37:df:d3:6b:c2:1e:14:0c:99:04:63:f5:
         b3:b9:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:22:43 2024 by rpki-client on console-ams.rpki-client.org